Experimental Fault-Tolerant Quantum Cryptography in a Decoherence-Pree Subspace 
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We experimentally implement a fault-tolerant quantum key distribution protocol with two photons 
in a decoherence-free subspace (DFS). It is demonstrated that our protocol can yield good key rate 
even with large bit-flip error rate caused by collective rotation, while the usual realization of BB84 
protocol cannot produce any secure final key given the same channel. Since the experiment is 
performed in polarization space and does not need the calibration of reference frame, important 
applications in free-space quantum communication are expected. Moreover, our method can also be 
used to robustly transmit an arbitrary two- level quantum state in a type of DFS. 

PACS numbers: 03.67.Pp, 03.67.Dd, 03.67Hk 



Quantum key distribution (QKD) can help two remote 
parties to accomplish unconditionally secure communica- 
tions which is an impossible task by any classical method 
0. The security of QKD is guaranteed by known prin- 
ciples of quantum mechanics |3i S rather than the as- 
sumed computational complexity in classical secure com- 
munication. Since the first QKD protocol proposed by 
Bennett and Brassard in 1984 (BB84 protocol) much 
work has been done in the field. In recent years, nu- 
merous modified protocols have been proposed and ex- 
perimentally realized, e.g. the single-photon realizations 
in cither phase-coding or polarizations^the realizations 
with entangled photon pairs and so on [l|. 

While each protocols or the physical realizations may 
have its own advantage, there are still some limitations 
for QKD in practice. In certain cases, we have no way to 
use the optical fibers and the task has to be done in free 
space, for example, if we want to carry out secure com- 
munications between a fixed station on the earth and 
a moving object such as an airplane or satellite in the 
space . Photon polarization is a natural candidate for 
the QKD in free space, but the communicating parties 
must share a common reference frame for spatial orien- 
tation 0, so that they can prepare and measure the 
photon polarization in the same reference frame. Some- 
times, it could well be the case that the two parties have 
a relative instantaneous rotation, for example during the 
quantum key distribution between a swinging airplane 
and the earth. Moreover, in some other cases the channel 
may also rotate the photon polarization. Consequently, 
the two parties will no more share the same reference 
frame from a passive perspective. These practical disad- 
vantages could bring significant error rate to the protocol 
if one uses the single-photon polarization as information 
carrier, in some extreme cases no secure final key can be 
distilled. 



One possible solution to the above problem is to utilize 
multi-qubit entangled states in a decoherence-free sub- 
space (DFS) where all the states are immune to some 
kind rotation of reference frame. According to the infor- 
matics, the rotation of the reference system can be seen 
as a collective noise, that is, the random unitary trans- 
formation to each qubit is identical. The idea of DFS 
0, Inl llll | was proven to be very important in quantum 
computation and quantum communication. 

Very recently, several quantum communication proto- 
cols based on DFS have been put forward. Bartlett et.al 
P] and Boileau et.al utilize four photons as a logic 
qubit to perform quantum key distribution. Yet, the four 
photon entanglement source based on nowadays technol- 
ogy is too poor to be used in long distance communica- 
tion. Recently, some other protocols 0, have been 
also put forward where only two photons are used. Two 
photon entanglement source can be achieved by sponta- 
neous parameter down conversion (SPDC) and it can be 
bright enough for the mission of quantum key distribu- 
tion. However, these protocols demand collective mea- 
surement of the two photons after the trip through the 
channel and this kind of measurement demand that the 
photons interfere with each other. 

Another two-photon protocol suggested by one of us 
has the following properties: While two photons 
are requested and the scheme only needs local individ- 
ual measurement. Although the protocol has the draw- 
back that it only applies to the collective random rotation 
noise, such a situation can be found in many realistic ap- 
plications such as in free space quantum communication 
and communication with swinging object. In this letter, 
we report an experimental realization of such a proto- 
col. It is demonstrated that our experimental method 
can yield good key rate even with large bit-flip error rate 
caused by collective rotation, while the usual realization 



2 



of BB84 protocol cannot produce any secure final key 
given the same channel. 

Our experiment exploits the following 4 encoded BB84 
states [l5|: 
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Here |+), |— ) are the same meaning as in 

BB84 protocol, represent for horizontal, vertical, and di- 
agonal and anti-diagonal polarization states respectively. 
It is easy to verify, the states ]'(/'") 12 and |(/)+)i2 are in- 
variant under the following collective rotation 
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Here, 9 is the collective rotation noise parameter, 
which is depending on the environment and will fluctuate 
with time. This invariance implies that all the linear su- 
perposition of the two states constitute a subspace that 
is decoherence free to the collective rotation noise. 

The experimental setup of the protocol is sketched 
in Fig. ^ Type II parametric down-conversion in p- 
barium borate (BBO), pumped by a mode-locked fem- 
tosecond laser working at wavelength of 394nm and a 
power of 600mW, produces about 4000 polarization en- 
tangled photon pairs per second at 788nm whose state 
is |'i/'~)i2 , i-e. the state \ V) in our protocol. The other 
three states can be obtained by performing a correspond- 
ing local unitary transformation on the state \V). 

We use electro-optic modulators controlled by random 
number generators to realize Alice's encryption. After 
the bias voltage and half-wave voltage being carefully 
calibrated and adjusted, the modulators can translate 
the photon's state properly. When the modulators are 
turned off, they do nothing to the polarization of the 
photons to be sent. Once switched on, the modulators 
will change the polarization of the photons like half wave 
plates. Modulator 1 is set to be degree to its axis. Mod- 
ulator 2 and 3 are set to be 45 degree and 22.5 degree, 
respectively. It is easy to show that when modulator 1, 2 
are turned on together, the state will be changed from \ V) 
to \H). When modulator 1, 3 are turned on, the state is 
|-|-') and when modulator 2, 3 are turned on, |— ') is pro- 
duced. Obviously when all the modulators are switched 
off, the output state is \V). 

Similar to the realization of BB84 protocol, Alice has 
two random number X, Y. X is used to choose base 
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FIG. 1: Experimental setup for two photon fault-tolerant 
quantum key distribution protocol. The 394 nm UV pulses 
are produced by frequency doubling the 788 nm pulses of the 
mode-locked laser using a nonlinear LBO crystal (LiBsOs). 
The UV pulses pass through 2mm BBO (/3-barium borate ) 
crystal and polarization entangled photon pairs in the state, 
\ip~)i2, are created. In order to compensate the birefringence 
of the BBO crystal, we place a half wave plate (HWP) and 
a compensating BBO crystal of 1 mm thickness on each path 
of the two photons as a compensating system (labelled C.S.). 
Three electro-optic modulators controlled by a random num- 
ber generator are utilized to produce the other three two- 
photon states requested by the protocol. They are labelled 
by M1-M3 respectively. Channel noise of random rotation is 
realized by four half wave plates, two in each path {He and 
Hn)- We use an electro-optic modulator M4 controlled by an- 
other random number generator to choose the measurement 
bases. After the modulator, we place polarized beam splitters 
(PBS) and the raw key is obtained by observing the clicking 
of detectors behind the PBS. A interference filters (IF) with 
FWHM — 2.8nm is placed before each single photon detector 
(Dl - D4) to improve the visibility of the entangled pair. Each 
user has a computer to control the random number generator 
and record the detector's events. 



and Y is Alice's bit value. Alice utilizes the two random 
number to control the modulators to randomly prepare 
one of the four encoded states in the DFS. If AT = 0, Alice 
will choose the base When X=l, she will 

choose the base If Y=l, Alice will prepare 

\H) or I -I-'). Otherwise, she will prepare \V) or |— ') . 
Table in describes the process in detail. 

The two random numbers are achieved by quantum 
process of splitting a beam of single photons similar as 
Jennewein et al. did in their experiment [l^ . At first. 
The two random numbers are stored in a FIFO mem- 
ory. Then they will be readout and encoded according 
to table m triggered by a lOOkHz clock. In our experi- 
ment, the encoding frequency of lOOkHz is so high that 
the probability of more than 1 pair appearing in the same 
encoding period is small enough to guarantee the security 
of quantum key distribution. 
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TABLE I: Summary of the process of encoding. X denotes 
the base and Y is the bit value. They are prepared by the 
random number generator. The two number determine which 
modulators will be turn on and which state is prepared. 
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We use two half-wave plates (HWPs) to simulate the 
collective random rotation of the noise channel. Here, 
the unitary transformation introduced by the HWPs is 
slightly different from the noise of collective random rota- 
tions as assumed in the original protocol. Instead of the 
unitary transformation of Eq.(2), if we set the HWP at 
the angle | to its optical axis, the function is as follows: 

\H) ^ cose\H) - singly) 

\V) - {sin 9\H) + cos e\V)). (3) 

In order to realize the rotation noise as in Eq. (2), we 
further insert an additional HWP (He), which is set at 
degree, in front of the Hn to correct the minus phase 
shift in each path. 

Since the four encoded states as shown in Eq. (1) are 
invariant under the collective rotation described above. 
Bob only needs to use an electro-optic modulator to 
choose his measurement bases and then let each photon 
respectively pass through a PBS to perform a polariza- 
tion measurement (see Fig. . In this way, our proto- 
col avoids the collective measurement which needs the 
two- photon interference [isl . The entangled photon 
pairs are detected by fiber-coupled single photon detec- 
tors. Bob uses another random number generator Z to 
control the electro-optic modulator that is set at 22.5 de- 
gree. If Z = 0, he measures photon 1 in the {\H), \ V)} 
basis. Otherwise he chooses the {|+),|— )} basis. For 
photon 2, as there is no modulator, it is measured in 
{\H),\V)} basis. 

The photons are detected by silicon avalanche photon 
diodes. When Bob find that photon 1(D1 or D2) and 
photon 2(D3 or D4) are simultaneously detected in a co- 
incidence window of 5ns, he will record it as a successful 
detection event. If Dl and D4 or D2 and D3 fire simulta- 
neously, he will record the bit as "0" . Otherwise he will 
record as "1" . 

The encoding clock can also give a timing signal in a 
measurement turn. The computer on Bob's side registers 
all detection events as time stamps together with mea- 
sure base information and the detection result. After the 
key distribution. Bob will declare at what time he get 
a detection event and his measurement base. And Alice 
will tell Bob to discard those bits in wrong bases to pro- 
duce the raw key. Then, they can do error test and final 
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FIG. 2: (a)Experimentally result of the quantum bit error 
rates of all the states in our protocol and BB84 protocol in 
the rotation noise, (b) Experimental result of the total quan- 
tum bit error rate of our protocol and BB84 protocol. It can 
be seen at any angle that our protocol is below the line of 
11%, which is the security bound of the BB84 type protocol. 
The error rates of our protocol are due to the imperfection of 
the entanglement resource, the detectors and the electro-optic 
modulators. The error rates of BB84 protocol are sinusoidal 
and are the same to our protocol at degree angle rotation 
noise, which are in agreement with theoretical prediction. 



key distillation. As it has been shown in Ref Il5|, the 
protocol here can actually be regarded as BB84 protocol 
with encoding and decoding. Therefore, we only need to 
check its quantum bit error rate (QBER) after decoding 
for the security issue, i.e., if the QBER after decoding is 
less than 11%, then we conclude that we can distill some 
unconditionally secure final key [3.lr^. 

Fig. 121 provides QBERs of each state with the same 
collective random rotation channel and the total error 
rates. In our two-photon encoding experiment, the rate 
of the raw keys is about 2000/s. Under different random 
rotation noise the QBERs are all observed to be less than 
11%, which is sufficient to guarantee the absolute secu- 
rity of the protocol. For each experimental point, we 
spend 50 seconds to collect the raw keys to measure the 
QBERs, which leads to an error bar of the QBERs of 
0.1%. Therefore our protocol indeed always works given 
whatever unknown collective random rotation noise. 

In our experiment, we want to see whether the protocol 
has advantage to standard realization of BB84 therefore 
we only need to compare the QBERs of two protocols 
with the same collective random noise channel. Exper- 
imentally, we project photon 2 into the state |-|-) as a 
trigger. Then photon 1 can be treated as a single pho- 
ton source to be in the state |— ). We use Modulator 1 
and 2 to prepare the four encoded single-photon state in 
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FIG. 3: Coincidence fringes for the entangled photon source 
in our experiment whose state is |i/'~)i2. When varying the 
polarizer angle 6\, The two complimentary sine curve with a 
visibility of 88%, which will bring 6% error rate to the QKD 
protocol which is the main reason of the QBER of our exper- 
iment. 



the standard BBM protocol. Modulator 4 and the PBS 
behind are used to perform the necessary polarization 
measurement on photon 1. The obtained QBERs un- 
der different rotation noise is also shown in Fig. |2] The 
figure shows that as long as \9\ > 7r/18, the QBERs of 
the standard realization of BB84 are larger than 11%, 
which consequently leads to the failure of quantum key 
distribution H[l3|- 

It is important to note that, given perfect source of 
entangled photon source, modulator and detector, the 
QBERs of our protocol should approach to at any 
random collective rotation noise. However, in our two- 
photon quantum key distribution experiment a signifi- 
cant average QBER of 6% is observed. This is mainly 
due to the imperfection of our entangle photon source 
from type II parameter down conversion. As shown in 
Fig. 121 the visibility of our entangled photon source has 
a limited visibility of about 88%, which is in good agree- 
ment with our observed QBER of 6% 

In summary, we have experimentally realized a fault 
tolerant quantum key distribution protocol in a DFS. As 
far as we have known, this is the first result of two pho- 
ton quantum cryptography experiment that conquers the 
rotation noise with a decoherence free subspace|T3 We 
have verified the advantage of quantum key distribution 
in DFS over a random collective rotation noise. 

The experiment also has an extensive application back- 
ground in practice. Free space quantum communication 
is thought as a good choice to realize global quantum 
communication [6j. In free space, the main noise is ro- 
tational type and the dispersion noise can be neglected. 
Our protocol can be useful in this situation. Also, in the 
cases when QKD between earth and swinging objects is 
needed, our protocol has unique advantage. The bit rate 
of our protocol is 2000 per second and it can be signifi- 



cantly improved by raising the laser power and improving 
the detection efficiency. We believe it is potentially rather 
useful for practical QKD in free space in the future. 

Moreover, the experiment is completed in a DFS that 
plays an important role in quantum computation and 
quantum communication. As is known that there are two 
methods for robust quantum communication, the quan- 
tum error correction codes(QECC) and the decoherence 
free subspace. So far, QECC codes have not been demon- 
strated by real qubits because they need at least 5 qubits. 
Here we for the first time demonstrate robust quantum 
communication of an arbitrary two-level quantum state 
in a type of decoherence free subspace and we can trans- 
mit quantum information robustly jlll] . 
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